Kaspersky Anti-Virus 6.0 for Windows Servers Enterprise Edition MP2 (builds 6.0.2. [551-555])

Each user who will manage the Anti-Virus should be registered in the Anti-Virus settings on the protected server. Anti-Virus rights are granted corresponding to the tasks charged on the user:

• Full control – full control to all Anti-Virus functions; 

• Modification – means the same as full control, but in this case the user cannot modify the list of the Anti-Virus users (cannot change their access rights); 

• Read – users with these rights can only view Anti-Virus functional components, general Anti-Virus settings, task settings, statistics and users’ rights.

During the installation of Kaspersky Anti-Virus on the protected server the group KAVWSEE Administrators is created. This group will have the following rights on the server:

1. Full control rights to access Kaspersky Anti-Virus

2. Rights for local and remote access, start and activation of COM servers

3. Rights for local and remote access, start and activation of DCOM server of Kaspersky Anti-Virus Management

4. Rights for remote access to the WMI Control methods necessary for work.

The group is created empty. You can add user accounts to this group – these users will have full access to all Anti-Virus functions (the Full control right). By default users of the Local administrators group on the protected server have access to all Anti-Virus functions. If necessary you can restrict access rights to the Anti-Virus for groups Administrators and KAVWSEE Administrators.

Local administrators of the protected server ALWAYS can view and edit access rights to the Anti-Virus irrespective of the settings which will be performed in the Anti-Virus. Local administrators cannot be deprived of these rights (even if you block the Read/ Modification right for the Administrators group).

You can also perform extended setting of the access rights: allow or deny access to specific Anti-Virus functions. The functions whose access you can manage are listed in the table below:

Anti-Virus functions	Description	Access rights
Connection	Viewing information in the nodes of the Anti-Virus functional components and Anti-Virus statistics	Full control
		Modification
		Read
Task status management	Anti-Virus task starting/stopping/pausing/resuming	Full control
		Modification
Task management	Creating and deleting on-demand scan tasks	Full control
		Modification
Reading parameter	Viewing Anti-Virus and task parameters Viewing report, notification and System audit log parameters Exporting Anti-Virus parameters	Full control
		Modification
		Read
Modifying parameter	Viewing and changing Anti-Virus parameters; Importing and exporting Anti-Virus parameters; Viewing and changing task parameters; Viewing and changing the report, notification and System audit log parameters	Full control
		Modification
Managing quarantine and backup storage	Placing objects into quarantine; Removing objects from the quarantine and removing files from the backup storage Restoring files from the quarantine and backup storage	Full control
		Modification
Viewing reports	Viewing detailed reports about task execution in the Reports node and events in the System audit log node	Full control
		Modification
		Read
Managing reports	Deleting reports in the Reports node and events in the System audit log node	Full control
		Modification
Managing keys	Installing and removing keys	Full control
		Modification
Viewing user's rights	Viewing the list of the Anti-Virus users	Full control
		Modification
		Read
Managing Security	Adding or deleting Anti-Virus users; Distribution of the Anti-Virus users' rights	Full control

To modify the access rights to the Anti-Virus open the Anti-Virus Console > right-click Kaspersky Anti-Virus utility and select Modify user permissions

Access rights can be modified under the account which has the Modification or Full control right!

In the section Groups or user names add or delete accounts of the users or groups. Next, highlight the specific account, modify its rights in the field Permissions for <user account>.

In order to perform advanced right configuration, select the required user or the group, press the Advanced button, in the open window highlight the necessary account and click the Edit button. In the Permissions Entry window edit the list of the Anti-Virus functions to which the account will have access: